Manage Team Access

Nexus provides two levels of access control: account-level and organization-level. This guide covers inviting users, managing roles, and reviewing audit events.

Role reference

For a complete list of roles and their permissions, see Roles and permissions.

Prerequisites

• You are signed in with an active workspace
• Your account role is SuperAdmin (for account-level management)
• Your organization role is Owner or Admin (for organization-level management)

Account access page

Navigate to Settings → Account access (/settings/account), or use the Command palette (Cmd K → "Account access").

This page shows:

• Account summary (seats used, pending invitations, plan features)
• User list with role management
• Pending invitations
• Role and permission reference
• Audit event log

Inviting a user

1. On the Account access page, find the Invite user section
2. Fill in the form:

Field	Description
Email	The email address of the person to invite
Account role	SuperAdmin or Member
Organization	Which organization to grant access to
Org role	Owner, Admin, or Member

3. Click Invite

On success, an invitation is created and an accept URL is shown. Copy the URL and share it with the invitee, or they will receive an email invitation.

Plan gate

Invitations require the account.users.invite permission and the inviteUsersFeatureEnabled feature flag on your plan. If your plan does not include invitations, an upgrade prompt is shown next to the Invite button.

Seat limits

If the Invite button is disabled with a "user limit reached" message, your account has consumed all available seats. Upgrade your plan or remove inactive users to free up seats.

Invitation statuses

Status	Description
Pending	Invitation sent, awaiting acceptance
Accepted	User has accepted and joined the account
Revoked	Invitation was manually revoked
Expired	Invitation passed its expiry date

Resending an invitation

Click Resend on a pending invitation to generate a new accept URL. Requires account.users.invite.

Revoking an invitation

Click Revoke on a pending invitation to cancel it. Requires account.users.manage.

Managing account user roles

In the Account users table, use the role dropdown next to each user to change their account role between SuperAdmin and Member. Requires account.roles.manage.

warning

Changing a user's account role to SuperAdmin grants them full control over the account, including the ability to invite users, manage billing, and delete organizations. Grant this role carefully.

Removing a user

Click Remove next to a user in the Account users table. A confirmation dialog will appear. Removing a user revokes their access to the account and all organizations under it. Requires account.users.manage.

danger

Removing a user is immediate and cannot be undone from the UI. The user will need to be re-invited if access needs to be restored.

Organization members

Navigate to Settings → Organization members (/settings/organization/members) to manage members of the active organization.

From this page you can:

• View all members and their organization roles
• Add existing account users to the organization
• Change a member's organization role
• Remove a member from the organization

Account users vs. organization members

An account user has access to the Prangana subscription. An organization member has access to a specific organization's projects and services. A user must be an account user before they can be added as an organization member.

Audit events

The Audit events table on the Account access page shows a log of access-related actions:

Column	Description
Action	The action performed (e.g. user.invited, role.changed)
Actor	User ID of who performed the action
Target	User or invitation affected
Time	When the action occurred

info

Viewing audit events requires the account.audit.view permission, which is only available to SuperAdmin users.

Troubleshooting

If the Invite button is disabled or you cannot manage users, see Common issues — Access and permissions.